Privacy Policy
We are pleased about your interest in our online store. Protecting your personal data is important to us. This Privacy Policy explains how we collect and use personal data when you visit or make a purchase on our website.
1. Data Controller
UPRAIL GmbH
Richard-Byrd-Straße 12
50829 Cologne (Köln), Germany
Email: mail@peoplesstore.de
Phone: +49 (0)221 500057-20
2. Overview: What data we process and why
We process personal data in particular for the following purposes:
- Providing and operating our online store (website functionality, security, fraud prevention)
- Processing orders, shipping, customer service, and handling returns
- Payment processing
- Sending transactional emails and, if subscribed, newsletters
- Website analytics (Google Analytics) to understand usage and improve the store (only with consent where required)
- Integrations with social media and embedded media (Instagram links/features and YouTube videos)
3. Legal bases (EU/UK/EEA visitors)
Where applicable, we process your personal data on the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR) – e.g., to process and deliver your order.
- Legal obligation (Art. 6(1)(c) GDPR) – e.g., retention for tax and commercial law.
- Legitimate interests (Art. 6(1)(f) GDPR) – e.g., store security, preventing abuse, improving our services.
- Consent (Art. 6(1)(a) GDPR) – e.g., analytics cookies and certain embedded media where required. You can withdraw consent at any time with effect for the future.
4. Shopify (store platform and hosting)
Our store is hosted on Shopify. Shopify provides the online e-commerce platform that allows us to sell our products and services. When you visit our website or place an order, Shopify processes data on our behalf and/or as a separate controller for certain services. This may include your contact details, order details, payment and shipping information, and device/usage data necessary to operate the store.
Shopify and service providers may process data outside the European Economic Area. Where required, transfers rely on appropriate safeguards (e.g., standard contractual clauses) and other measures provided by the relevant providers.
5. Orders, shipping and customer service
When you place an order, we process data necessary to fulfill the contract, such as name, billing/shipping address, email address, phone number (if provided), ordered items, and communication with our support. We share the necessary data with shipping and logistics providers to deliver your order.
6. Payments
We offer payment methods such as PayPal, credit card and Klarna/Sofort. Payment processing is carried out by the respective payment service providers. Depending on the chosen method, your payment details and necessary transaction data are transmitted directly to the payment provider. We do not receive full card details.
Please refer to the privacy information of your chosen payment provider for details on their processing.
7. Emails (Shopify Email) and marketing communications
We send transactional emails (e.g., order confirmations, shipping updates) as part of contract performance. If you subscribe to our newsletter, we will send marketing emails. You can unsubscribe at any time via the unsubscribe link in each email or by contacting us. Newsletter subscription and management may be handled via Shopify Email and Shopify’s related services.
8. Cookies, consent management and similar technologies
We use cookies and similar technologies to operate and secure the website and, where enabled, to measure usage and improve our services. Some cookies are necessary for the website to function. Others (e.g., analytics cookies) are used only if you give consent where required.
You can manage or withdraw your consent at any time via our cookie settings (if available on the site) or by adjusting your browser settings. Please note that disabling certain cookies may affect website functionality.
9. Google Analytics
If enabled, we use Google Analytics to understand how visitors use our website (e.g., which pages are visited, time spent, general interaction patterns) in order to improve our store. Google Analytics typically uses cookies and similar technologies. Where required by law, Google Analytics is activated only after you provide consent via our cookie banner/settings.
Depending on configuration, IP addresses may be processed in truncated/anonymized form. Data may be processed on Google servers, which can be located outside the EEA. Where required, appropriate safeguards are used for international transfers (e.g., standard contractual clauses).
10. YouTube embedded videos
Our website may include embedded YouTube videos. When you play or interact with embedded videos, YouTube/Google may process your data (e.g., IP address, device information, and usage data) and may set cookies. Where required by law, we only load/activate such embedded content after consent, or we use a solution that blocks third-party requests until you interact or consent (depending on our implementation).
If you do not want YouTube to associate your visit with your account, please log out of YouTube before visiting our website.
11. Instagram
We maintain an Instagram presence. If our website contains links to Instagram or integrates Instagram features, your data may be processed by the provider when you follow the link or interact with embedded content (if any). We have no influence on the data processing by Instagram/Meta and their responsibility. Please refer to Instagram/Meta’s privacy information for details.
12. Server logs and security
When you visit our website, technical information may be processed to ensure security and stability (e.g., IP address, date/time of access, requested page, browser type, referrer URL). This data is used to operate the website securely and to prevent misuse and fraud.
13. Data retention
We store personal data only as long as necessary for the purposes described above and as required by applicable law. Order and billing data may be stored for statutory retention periods under commercial and tax law. Communication records are retained as needed to handle requests and for legal defense.
14. Your rights
Subject to applicable law, you may have the right to request access, rectification, deletion, restriction, data portability, and to object to certain processing. You also have the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
You may also lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
15. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: mail@peoplesstore.de
16. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page.